high7.5

CVE-2025-38741

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH.

Impact

Dell Enterprise SONiC OS, version 4.5.0, contains a cryptographic key vulnerability in SSH. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to unauthorized access to communication.

Affected products

Vendor	Product	Affected versions
Dell	Enterprise Sonic Os	Version 4.5.0

Weakness classification

CWE-321 CWE-798

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-us/000340083/dsa-2025-275-security-update-for-dell-enterprise-sonic-distribution-vulnerabilities